Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PayPlus Payment Gateway 8.2.2 Clear all filters
TI-2026-11037 CVE-2026-12973 · GHSA-892x-54hq-8c85

PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Key Disclosure and Order Status Modification

Priority HIGH 68

The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to disclose the secret o…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00267 Published 2026-07-20 Fixed in 8.2.2 CWE-862
TI-2026-11036 CVE-2026-12972 · GHSA-hhfq-j633-m72j

PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata Tampering

Priority MEDIUM 63

The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to tamper with the payme…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00295 Published 2026-07-20 Fixed in 8.2.2 CWE-284